WASViking Mobile Security Assessment

Spec sheet

Purpose

Mobile Security Assessment analyzes uploaded Android or iOS packages against the OWASP Mobile Application Security Verification Standard (MASVS).Read 8 Oct 2026 · wasviking.com

Support

The demo and quote page says the team will respond within one business day.Read 8 Oct 2026 · wasviking.com

Headquarters

Orlando, Florida, USARead 28 Sep 2026 · wasviking.com

Binary storage security

WASViking says uploaded mobile application binaries are stored with server-side AES-256 encryption.Read 8 Oct 2026 · wasviking.com

Company security status

WASViking states that its product supports compliance work for GDPR, LGPD, PCI DSS v4.0, ISO 27001, and BACEN, while the company is working toward SOC 2 Type I and ISO 27001 certification.Read 8 Oct 2026 · wasviking.com

Compliance evidence

The page describes mobile assessment evidence mapped to PCI DSS v4.0, ISO 27001:2022, NIST CSF 2.0, GDPR, and LGPD controls.Read 8 Oct 2026 · wasviking.com

Coverage

The engine performs more than 200 checks across every MASVS group, including configuration, transport, cryptography, storage, platform exposure, binary hardening, components, and embedded secrets.Read 8 Oct 2026 · wasviking.com

Evaluation

WASViking says an engagement starts with a guided demo, followed by a sales-assisted evaluation using scans against targets the customer authorizes.Read 8 Oct 2026 · wasviking.com

Finding context

Findings include an attack path, prerequisites, and the inputs used to produce the risk score.Read 8 Oct 2026 · wasviking.com

Package formats

The assessment accepts Android APK and AAB files and iOS IPA files.Read 8 Oct 2026 · wasviking.com

Pricing

Mobile Security Assessment is listed as an optional add-on, quoted based on scope and enabled for the organization by WASViking; the site says pricing depends on targets, modules, and deployment.Read 8 Oct 2026 · wasviking.com

Release comparison

The service compares releases by finding identity and reports what was fixed, introduced, or carried forward, including dependency changes.Read 8 Oct 2026 · wasviking.com

SBOM

It creates a CycloneDX software bill of materials from the shipped application and matches components against published advisories and the CISA KEV catalog.Read 8 Oct 2026 · wasviking.com

Standards mapping

Findings map to OWASP MASVS, MASTG, CWE, and the OWASP Mobile Top 10; legacy MASVS requirement identifiers are also supported.Read 8 Oct 2026 · wasviking.com

Workflow

Mobile findings enter the same workflow as web and API results, with an owner, severity, SLA, audit trail, and export.Read 8 Oct 2026 · wasviking.com

Plans and prices

Every WASViking Mobile Security Assessment plan and price →

Where Specifiction places it

• Mobile Application Security Testing Software#18 of 216.8